Security Assertion Markup Language (SAML) is an XML-based standard for exchanging authentication and authorization data between parties, in particular, between an identity provider (IDP) and a service provider (SP). In this article, we will walk through how to set up a SnowMirror SP integration with Authentik SAML IDP.

Overview

The SAML flow allows you to authenticate a user's identity and obtain a SAML response that can be used to interact with Authentik SAML IDP on their behalf. Here are the steps involved in setting up a SnowMirror integration with Authentik SAML IDP:

1. Create SAML Property Mappings

2. Set up a SAML Provider in Authentik

3. Create an application in Authentik

4. Create Groups and assign users in Authentik

5. Configure the SnowMirror Security Real

We'll go through each of these steps in detail below.

Step 1: Create SAML Property Mappings

Login to your Authentik admin interface and

1. Browse to the Customisation > Property Mappings section from the left sidebar

2. Click the Create button.

3. Select SAML Property Mapping and then click Next.

   

Then use the following values to create the property and click Finish.

Step 2: Set up a SAML Provider in Authentik

The first step is to create a Authentik Provider. To do this, follow these steps:

1. Browse to the Applications > Providers section from the left sidebar

2. Click the Create button.

   

3. Select "SAML Provider" and Click on "Next"

   

Then use the following values to create the provider and click Finish.

authentik Default SAML Mapping: User ID |

Step 3: Create an application in Authentik

1. Click the Create button under the "Assigned to application" heading that's now showing for the SnowMirror provider in Authentik.

1. Populate the form with the information pictured below and then click the Create button:

4. Create Groups and assign users in Authentik

1. Browse to the Directory > Groups section from the left sidebar

2. Click the Create button.

3. Enter SUPER_ADMINISTRATOR and click Create

   

4. Setup additional SnowMirror Groups if required

   

5. Select the Group for which you would like to add users to and select Users from the top tab bar.

6. Click on Add Existing User

   

7. Select the user and click Add

Step 5: Configure the SnowMirror Security Real

Login to your SnowMirror admin interface and

1. Browse to the Settings > User Management section from the top menu

2. Click the Configure Security Realm button Then use the following values to create the Security Realm and click Save.

Click logout and login to your SnowMirror using your SnowMirror FQDN.